Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/-GXv-JYjDGtoUBCkzwPPVUtHAhc.roa
File: -GXv-JYjDGtoUBCkzwPPVUtHAhc.roa (raw, json)
Hash identifier: eqHmBkqTqci6gxKYiaoNk1Yk1zXC91uV5xSKkGtgYzE=
Subject key identifier: F8:65:EF:F8:96:23:0C:6B:68:50:10:A4:CF:03:CF:55:4B:47:02:17
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 12A2
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/-GXv-JYjDGtoUBCkzwPPVUtHAhc.roa
Signing time: Sat 31 May 2025 22:09:11 +0000
ROA not before: Sat 31 May 2025 22:09:11 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 119.16.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4770 (0x12a2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 31 22:09:11 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=F865EFF896230C6B685010A4CF03CF554B470217
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:66:05:0e:69:c4:31:a0:a8:58:79:e5:85:d6:
be:42:31:31:46:ae:0c:85:62:dc:f9:3d:73:ef:fe:
dd:40:e1:a6:95:fc:b7:b5:1e:18:e8:bd:c8:cf:a5:
28:cb:e1:77:c2:7c:5f:f0:ac:c9:c6:60:a4:52:0d:
ed:c6:cd:03:f2:68:62:a8:e1:de:ab:72:54:ea:b3:
7f:6e:d5:03:61:51:7f:52:5a:d8:40:b1:db:9b:7b:
f0:42:f9:dd:70:40:d4:98:33:fb:61:00:e3:f6:70:
57:ec:dc:b6:99:3b:01:3a:19:f7:6a:0c:c2:08:33:
3a:e9:8c:a8:fe:1c:db:d8:98:73:6f:ce:4c:5f:84:
56:60:27:fd:ff:2f:a3:83:b4:15:5f:8e:6d:7e:ea:
07:7a:6e:7f:88:3b:c9:2e:9a:03:48:ad:fa:5a:eb:
3a:82:fb:0c:00:14:12:56:ce:f1:a4:f6:e4:a0:db:
75:be:dd:32:3b:4d:c0:6d:c6:98:a1:ba:39:50:73:
3e:da:e7:01:6b:7a:49:92:32:61:df:57:b7:87:81:
89:8b:20:e3:68:d1:1f:05:72:08:3d:fc:1d:71:81:
e1:12:6e:5d:a7:1a:e0:73:56:1a:40:dc:4b:69:be:
09:42:7d:4e:ed:c1:17:22:98:23:6e:9a:43:07:66:
ec:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:65:EF:F8:96:23:0C:6B:68:50:10:A4:CF:03:CF:55:4B:47:02:17
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/-GXv-JYjDGtoUBCkzwPPVUtHAhc.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
119.16.0.0/16
Signature Algorithm: sha256WithRSAEncryption
4c:e9:0c:6f:99:fd:b9:52:e9:08:c8:9c:61:72:8e:a3:8c:4f:
6c:1e:3a:b4:e1:50:e7:d0:a5:57:f1:8d:40:3e:46:92:eb:80:
4e:0f:3f:b3:6b:82:36:be:d7:b0:a6:f2:26:4d:e5:47:72:68:
73:89:87:4f:3c:5a:26:22:04:fc:18:91:ac:5c:80:fe:f7:7f:
88:d8:2f:53:f0:49:94:94:f3:3f:c5:aa:64:cd:d8:60:16:90:
15:9b:9f:8b:55:13:54:d4:1c:a1:25:dc:bd:e5:62:fc:76:72:
21:ef:3c:54:bf:58:34:87:42:31:3a:0c:e4:36:e4:5e:2c:9a:
63:6c:14:08:4b:d6:ab:cb:e6:8f:ab:95:40:80:6b:60:e1:da:
96:6d:5e:d2:40:93:dc:cd:56:18:c4:2d:f5:45:ac:b1:11:a6:
2e:9f:67:f8:69:a5:56:5c:c0:ab:8e:d2:c1:46:56:88:29:95:
7f:ed:b1:e6:7f:7a:b2:46:f5:3e:4a:3a:07:d0:e7:9a:2c:1c:
6d:cb:3e:56:c1:2d:ca:83:f5:c9:20:9d:11:05:75:2b:57:61:
b5:6f:54:ac:72:68:1d:69:7b:85:fa:73:50:04:a3:98:44:49:
7a:d4:42:77:38:17:2c:49:0a:88:6d:6c:3b:85:25:db:78:d5:
be:6c:f8:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 21 23:08:27 2025 by rpki-client